Security Scan Report: www.google.com

Redirected to: https://firebasestorage.googleapis.com/v0/b/kkwooellwuuiw.appspot.com/o/nnmmmiiittuuo.html?alt=media&token=b72c2bf8-df48-417c-84ef-4311c6fc2961

Submitted: Jan 15, 2026, 8:09:48 PMCompleted: Jan 15, 2026, 8:11:27 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is firebasestorage.googleapis.com and was registered NaN years ago.

Submitted URL: https://www.google.com/url?q=https://firebasestorage.googleapis.com/v0/b/kkwooellwuuiw.appspot.com/o/nnmmmiiittuuo.html?alt%3Dmedia%26token%3Db72c2bf8-df48-417c-84ef-4311c6fc2961

Effective URL: https://firebasestorage.googleapis.com/v0/b/kkwooellwuuiw.appspot.com/o/nnmmmiiittuuo.html?alt=media&token=b72c2bf8-df48-417c-84ef-4311c6fc2961Redirected

The Cisco Umbrella rank of the primary domain is #1 of the top 1 million websitesTop 100 Site

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Phishing page impersonating Zimbra login, hosted on Firebase storage – confirmed scam.

Risk Factors
Credential harvesting form on a cloud storage domain
Brand impersonation (Zimbra) on a non‑official domain
Use of a Google redirect to obscure the final cloud storage URL
Domain age information unavailable

Details

Page Title

Zimbra Sign In

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(51%)

Domain Information

The domain name 'www.google.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. The core label 'google' covers 6 characters split between 3 vowels and three consonants. Segmentation suggests one word: google. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.google.com/url?q=https://firebasestorage.googleapis.com/v0/b/kkwooellwuuiw.appspot.com/o/nnmmmiiittuuo.html?alt%3Dmedia%26token%3Db72c2bf8-df48-417c-84ef-4311c6fc2961

Page Load Overview

0.61s
Total Load Time
2
HTTP Requests
1
Domains
5 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:163 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software51% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
51%
cryptocurrency blockchain
41%
healthcare medical
40%
adult content
39%
news media journalism
39%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2142.251.38.74United States
AS15169GOOGLE
21--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F871438655E30891F513E4AC2BE7860136E4C523824DCD6C3E8CA7ACDF95AD98EA335C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nBruqsKNFGKGzYXc9Vgia1iZgoesuxephA:Bru/KNFl5c9iia1iuoPuxeI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3489:hGhEgAiBDAQCVAAQmCACAAAlBAACSgAhwYIBAEBQCgBCAaASAIICAGAAAAQAJAgADQBAQQgIIgjwiAgFAIkIBCAAICBBBAEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:e68c993366993366
Difference Hash:00304d4d4d4d0810
Wavelet Hash:f0f0e0e0e0e0f0f0
Color Hash:#d29279

Scan History

Scan history not available

Unable to load historical scan data